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(54) An electronic data protection system. 

(57) The system includes: a storage medium (1) 
for storing an encrypted electronic data, a 
medium number and encrypted permission in- 
formation ; a vendor computer having a per- 
sonal key generating unit (21) for generating a 
medium key based on the medium number (12), 
an electronic data decrypting key (22), and an 
encrypting unit (23) for encrypting the elec- 
tronic data decrypting key based on the 
medium key to generate the encrypted permis- 
sion information. The user computer having a 
personal key generating unit (31) for generating 
a medium key based on the medium number, a 
decrypting unit (32) for decrypting the encryp- 
ted permission information based on the 
medium key to generate the electronic data 
decrypting key which is the same as the elec- 
tronic data decrypting key of the vendor com- 
puter, and a decrypting unit (34) for decrypting 
the encrypted electronic data (14) based on the 
electronic data decrypting key (33) to generate 
a plain text electronic data. 



a o 
o i- 

i- > 

o < ac 
lu i— u >- 

_J < UJ UJ 



2 

o 
i— 

o 

UJ 

X 



o 

< J- 

o tr 
in lu , 
j cc >- 2 I 
! lu lu lu ; 



>- 



O 

I— 
Q_ 

>- 

St 

lu -z. 

Q =3 



. O 

u 



T 



5 cr 

Z5 LU 
5 § 



2 
~2L O 

if) < 

fa: 
if? 





Jouve, 18, rue Saint-Denis, 75001 PARIS 



BNSDOCID: <EP 0561 685 A2_L> 



BACKGROUND OF THE INVENTION 
1. Field of the Invention 
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2. Description of the Related Art 
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SUMMARY OF THE INVENTION 
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BRIEF EXPLANATION OF THE DRAWINGS 

In the drawings: 

Fi 9- 1 is a schematic block dianrarv, ~* 

Fiq 3 ' S h a o Pr,nC,Pal Viewof Represent invention- 
F-9. 3 shows one embodiment of the present in 
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vention; 

Fig. 4 is a flowchart of a storage process of soft- 
ware according to the present invention; 
Figs. 5A and 5B are explanatory views for one ex- 
ample of the encrypting process; 5 
Fig. 6 shows a software encrypting key manage- 
ment table according to an embodiment of the 
present invention; 

Figs. 7A and 7B are flowcharts for generating 
permission information; 10 
Fig. 8 is an explanatory view of generation of the 
permissioninformation; 

Figs. 9A and 9B are flowcharts for a decrypting 
process of software; 

Figs. 10A, 1 0B, and 10C are explanatory views of 15 
a program as electronic data; 
Fig. 11 A, 11B, and 11C are explanatory views of 
data as electronic data; 

Fig. 12 is an explanatory view of a ROM/RAM 
mixed type optical magnetic disk; 20 
Fig. 1 3 is an explanatory view for permission in- 
formation stored in another storage medium; and 
Fig. 14 is an explanatory view of multiple soft- 
ware written on one storage medium. 

25 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

Before describing the preferred embodiments, a 
conventional art and its problems will be explained 30 
below. 

Figure 1 is a schematic block diagram of a con- 
ventional electronic data protection system, particu- 
larly, a software protection system. The feature of the 
conventional software protection system lies in gen- 35 
eration of permission information 72 by using a user's 
personal number 91 as explained in detail below. 

As shown in the drawing, a software storage me- 
dium 71 , for example, an optical magnetic disk, a CD- 
ROM, a floppy disk and the like, is provided by a ven- 40 
dor to a user. That is, the vendor provides the soft- 
ware storage medium 71 storing the software to the 
user. The software storage medium 71 includes the 
permission information 72 and encrypted software 
73. The vendor computer includes a personal key 45 
generating unit 81, a software decrypting key 82 and 
an encrypting circuit 83. Further, the user computer 
includes the user's personal number 91, a personal 
key generating unit 92, a decrypting circuit 93, a soft- 
ware decrypting key 94, and a decrypting circuit 95. 50 

The software is stored in the software storage 
medium 71 after encryption. A user's personal key is 
generated by using the user's personal number 91, 
and the software decrypting key 82 is decrypted by 
the user's personal key so that the encrypting circuit 55 
83 encrypts the software decrypting key 82 to gen- 
erates the permission information. The permission 
information is stored on the software storage medium 



71. 

The user buys the software storage medium 71 
including the permission information 72 and the en- 
crypted software 73, and the user computer decrypts 
the encrypted software 73 so that it is possible to 
execute the unencrypted program. 

In the vendor computer, the personal key gener- 
ating unit 81 generates the personal key based on the 
user's personal number 91, for example, an appara- 
tus number of a computer. The software decrypting 
key 82 decrypts the encrypted software 73. The en- 
crypting circuit 83 generates the permission informa- 
tion 72 for storage on the software storage medium 
71. 

In the user computer, the personal key generat- 
ing unit 92 receives the user's personal number 91 
and generates the user's personal key. The decrypt- 
ing circuit 93 decrypts the permission information 72 
from the software storage medium 71 based on the 
personal key 81 . The software decrypting key 94 is 
input to the decrypting circuit 95, the decrypting cir- 
cuit 95 decrypts the encrypted software 73 to gener- 
ate the plain text software. As a result, the plain text 
software is loaded into a main storage of the user 
computer. 

An explained above, the conventional software 
protection system utilizes a user's personal number 
(or, an apparatus number of a computer) and a per- 
sonal key. 

In use of the personal number for the computer, 
the execution for the computer is applied by the per- 
mission information 72 so that only that computer can 
execute the plain text software. Accordingly, the user 
cannot utilize a different computer even if he is autho- 
rized. Further, it is impossible to transfer such plain 
text software to a third party. 

In use of the personal number for portable hard- 
ware, it is necessary to provide an interface between 
the hardware and the computer so that the total cost 
for protection rises. 

As a feature of the present invention, a storage 
medium for storing electronic data includes a medium 
number. A vendor authorizes use of the medium num- 
ber. According to the present invention, it is possible 
to access only electronic data stored on the medium 
authorized by the vendor. 

Figure 2 is a principal view of the present inven- 
tion. In Fig. 2, the storage medium 1 includes a me- 
dium number 12, permission information 13, and en- 
crypted electronic data 14. In the present invention, 
the electronic data includes computer software and 
electronically published data, as explained below. 
The vendor computer includes a medium personal 
key generating unit 21, an electronic data decrypting 
key 22, and a decrypting unit 23. The user computer 
includes a medium personal key generating unit 31, 
a decrypting unit 32, an electronic data decrypting 
key 33, and a decrypting unit 34. 
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decrypting key 35 (see, Fig. 9). The decrypting unit 34 
decrypts the encrypted software 15 read from the 
software storage medium 11 based on the software 
decrypting key 35, and generates the plain text soft- 
ware (see, Fig. 9). The user computer then executes 5 
the plain text software. 

Figure 4 is a flowchart of a storage process of the 
software according to the present invention. This 
flowchart shows the storage process of the encrypt- 
ed software 15 and the encrypted permission infor- 10 
mation 1 3. In step S1 , the vendor generates the soft- 
ware, for example, a job program, etc., and stores the 
generated software onto the software storage me- 
dium. In step S2, the vendor generates the software 
encrypting key. In step S3, the software encrypting 15 
key is stored in an encrypting key management table 
(see, Fig. 6) corresponding to each software. That is, 
the encrypting key generated by step S2 is stored in 
the encrypting key management table in correspon- 
dence with the name of the software generated by 20 
step S1. 

In step S4, the software encrypting key corre- 
sponding to the software designated by the vendor is 
taken from the encrypting key management table. In 
step S5, the vendor encrypts the plain text software 25 
by using the software encrypting key taken from the 
encrypting key management table to generate the en- 
crypted software. As.shown in Fig. 5, a main body of 
the software is encrypted by the encrypting key so as 
to generate the encrypted software body by using, for 30 
example, a data encryption standard (DES) which is 
widely used in the United States. As shown in Fig. 5B, 
in the DES, the main body of the software having 64- 
bit train is encrypted to the same 64-bit train, but hav- 
ing a different bit order. 35 

In step S6, the encrypted software is stored in 
the storage medium of the vendor (or, a manufacturer 
of the medium) so that it is possible to hold the once 
encrypted software. Accordingly, in a subsequent 
use of the software, the encrypting process can be 40 
omitted by the vendor since the software held on the 
medium is used again. In step S7, the encrypted soft- 
ware is stored on the software storage medium 11. In 
step S8, the vendor determines whether or not the 
encrypting process for the software is completed and 45 
the encrypted software is stored on the storage me- 
dium. When the result is "YES", the encrypting proc- 
ess is completed by the vendor. 

When the result is "NO", the encrypting process 
returns to the step S7 and sequentially stores the en- so 
crypted software having the name of the software 
designated. As explained above, the encrypted soft- 
ware is stored on the software storage medium 11. 

Figures 5A and 5B are explanatory views of one 
example of the encrypting process. A header portion 55 
H includes a software name as an identifier, and a 
main body of the software S includes the plain text 
software. The header portion H is not encrypted, and 



the main body of the software S is encrypted by the 
encrypting key K. The encryption is performed, for 
example, using the DES (Data Encryption Standard) 
as shown in Fig. 5B. The DES is already known in the 
United States. 

As shown in Fig. 5B, according to the encrypting 
process of the DES, the 64-bit bit train of the plain text 
software is converted to the same 64- bit train as 
above, but having a different bit order. The decrypting 
unit decrypts the encrypted 64-bit train to the plain 
text software by using the DES. 

Figure 6 shows a software encrypting key man- 
agement table according to an embodiment of the 
present invention. As shown in the drawing, the soft- 
ware encrypting key management table 4 is formed 
by the name of the software and the encrypting key 
corresponding to the name of the software. An es- 
cape character "ENC" is attached to each software 
name to indicate that the corresponding software is 
already encrypted. Further, the encrypted key is 
formed by a 64-bit bit. train as explained above. 

(1) Regarding the plain text software to be stored 
onto the storage medium, the software encrypt- 
ing key is taken from the software encrypting key 
management table. 

(2) The encrypting circuit 41 encrypts the plain 
text software based on the software encrypting 
key obtained by the above (1). 

(3) The encrypted software is stored on the soft- 
ware storage medium 11 as the encrypted soft- 
ware 15. 

The above steps are repeated for all plain text 
software designated by the vendor. As explained 
above, since once encrypted software is held by the 
vendor, this encrypted software is stored again on 
the software storage medium when another user re- 
quests this plain text software. The medium number 
12 is provided for only the corresponding storage me- 
dium, and is written onto the medium 11 in an un-re- 
writable form (i.e., the personal number cannot be re- 
written). 

Further, the encrypting key stored in the soft- 
ware encrypting key management table 4 coincides 
with the decrypting key when using an object key 
number as an encrypting algorithm. As explained 
above, the software encrypting key corresponding to 
the plain text software is taken from the software en- 
crypting key management table, the plain text soft- 
ware is encrypted by the software encrypting key to 
generate the encrypted software, and the encrypted 
software is stored in the software storage medium 
11. 

Figures 7A and 7B are flowcharts for generating 
permission information, and Figure 8 is an explana- 
tory view of generation of the permission information. 
The flowchart explains that the permission informa- 
tion 1 3 is generated for the software to be authorized 
and stored on the software storage medium. 
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* tepS11 ' tne nam e of the software to be au- 
thored ,s input to the software decrypting key man- 
agement table 5. In ste P S12, the software dec^ng 
key ,s loaded from the software decrypting key man 
agement table 5. As shown in Fig. 8 'the decTypTg 
key corresponding to the name of the software to be 
authored is sent from the software decrypt key 
management table 5 to the encrypting circuit 33 " 

from rhf P f 3 ' mediUm nUmber 12 * 'oaded 
from the software storage medium 11. ,„ step S14 

the medium key is generated in the personal key gen- 
era^ crcuit 211. That is, as shown in Fig. 7B the 
med urn number (plain text, i.e.. unencrypted) is Z 

t he" me, V ' ?? ^ (0r ' 3 S6Cret a, *> - ''at 
n use e o t h m e k D e ^ enCryPted > is 9*™*™- general, 
m use of the DES, a secret key is used, and in use of 
a secret algorithm, the secret key is not used 

In step S15, the software decrypting key (plain 

ey^Thatthr^ 6nCrypted * the ^ 
Key so that the perm.ss.on information (encrypted) is 

generated. The DES is used for the abole encr^g 

process in step S16, the permission information 7 n 

^^^^^^^ 

As explained above, briefly, the encrypted soft- 
ware ,s stored on the software storage medium 11 
the medium key 12 is read therefrom the software 
decryptmg key is encrypted by the medium key o 
generate the encrypted permission information 1 3 

eTon tnTZf^ in{orm ^ ™ is sto^ 

ed on the software storage medium 11. Accordingly 
the encrypted software 1 5 and the encrypted pe mis 

aae n r; mat ?T " ^ °" the 
age medium 11. 

mJ", 1!?' f' the software decrypting key manage- 
ment table 5 ,s provided for managing the software 
decr yphn key whjcn js use£j ^ *> 

ware The so« T* *° the P ' ain text s< ^ 
Z*™ L decr yP tina key is managed in cor- 

respondence with the software name. The software 
decrypting key management table 5 stores the de 
cryptmg key having the same structure as the soft- 
ware encrypting key management table 4 

1) When the vendorsells permission information 
to a user, the medium number 12 is read from the 
software storage medium 11. The personal key 
generating circuit 211 receives this medium num- 

si4:; d Fi g 9 . e 7 n ir s the medium key(see - step 

?„L N H eX V h ! S ° ftWare Opting key corre- 
sponding to the software to be sold is taken from 

5 ann deCryPtin9 k6y mana 9ement table 

231 ?h « 5 f ' npUt 10 the encr y ptin 9 circuit 
h!!hJ decrv P tina key is encrypted 

so T^T 0 ^ ^ in the enCryptina <*«* 231 
so that the encrypting circuit 231 generates the 

maZiv ,f ! f °: mati0n 13 ' The Permissi0n "«<*■ 
mat,on 13 deludes the software name having the 



escape character ENC and the encrypted per- 
mission information, and this permission infor- 

d,um 11. m th,s case, the software decrypting 

^^^^^^^^ 

tected by a known safety means (not shown) 
As explained above, the vendor generates the 
fTomT. ° n lhe medium --ber 12 rea^ 

w 2T ! ° St0ra9e medium 11 - en ^Pts the 
'0 software decrypting key based on the medium key 

ZkZT* so ; tware decrypted into 

w^re storage medium 11 as the permission informa- 

Figures 9A and 9B are a flowcharts of a decrypt- 
« .ng process of the software. The user buys the so? - 

co a m e n? ra r 9 K e m6diUm 11 3nd mounts * h £ -er 

software of the stora9e medium 11 «■ 

.n tep ITtnT™* ,0 ^ the Pr ° 9ram - 
20 ? ' hS USer com P ut er receives an in- 

20 struction to execute the software. In step S22 the 
med lurn number 12 , s teken from P ' 22, he 

age medium 11. , n step S23, the medium key (unen- 
ypted) ,s encrypted by the secret key (or, tile alg^- 
2S s 2 m) /° 96nerate the encr yP^ medium key. |„ step 

crvoJdLT'^ PermiSSi ° n information «• de 
crypted by th medium key so that the plain text soft- 
ware decrypting key is generated. ntexts <>ft 
fmm'fhf*,? 25 ' tHe encr yP ted software 15 is read 

30 n ? ^ are St0ra9e medium 11 - 'n step S26 
so the encrypted software is decrypted by the software 
decrypting key so that the plain text software is gen 
erated. In step S27, the user computer executes the 
plain text software. 

3S „.„ As f e ^' a ined above, briefly, the medium key is 
35 generated based on the medium key 12 from the sof 

1 3 ,s decrypted based on the medium key to generate 

oZr h deCryPti " 9 k6y 35 ' and «« e "-yPted 
40 35 LT IS d T CryPtod by the S ° ftWare decrypting key 
*o 35 to generate the plain text software 

Figures 10A, 10B, and 10C are explanatory views 
of a program as electronic data. Figure lOAshows an 

Rcurefor"- H9Ure 108 Sh ° WS 3 ^wchar, and 
45 IT ? V explanator V view of execution of the 

resoonlT ".k 9 - 10A ' 3n ° PtiCa ' ma9netic 6 cor! 
responds to the software storage medium 11 of Figs. 
2 and 3. and stores the medium number 12 the per- 
mission information 13 and the encrypted program 

50 mounte this disk ,n an optica, magnetic apparatus. As 
other examples, an optical disk, a CD-ROM, a floppy 
d sk a d disk a magnetjc tgpe a ^ PPy 

and th hke are known as storage media 

A program loader 61 has a function of a key gen- 
an ra d T° CeSS (Pere ° nal k6y 9enerati "9 P™ess 3 ) 

34? Vr ZT>1 Pr ° CeSS (d6CryPtin9 Process 32 and 
34), and loads the corresponding decrypted program 

from the optical magnetic disk 6 into a'main sSage 

6 
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63 in an execution stage of the program instruction so 
that the execution state of the program is established. 
The main storage 63 is formed by a RAM to expand 
the plain text program which is taken from the optical 
magnetic disk 6. 5 

In Fig. 10B, in step S31, the program loader 61 
receives the execution instruction for the program. In 
step S32, the program loader 61 loads a program to 
be executed and decrypts it. In step S33, the plain text 
program is expanded in the main memory to obtain an 10 
executable plain text program. In step S34, the plain 
text program in the main memory is executed. 

In Fig. 10C, a relationship between the software 
storage medium and the user computer is explained 
in detail. 15 

(1 ) The user computer takes the medium number 
12 from the software storage medium 11, and 
sends it to the personal key generating circuit 311 
to generate the encrypted medium key (see, step 

S23 of Fig. 9). 20 

(2) The decrypting circuit 321 receives the per- 
mission information 13 from the software storage 
medium 1 3, and encrypts it based on the medium 
key from the generating circuit 311. As a result, 

the software decrypting key 351 (corresponding 25 
to the software decrypting key 35) is obtained by 
the decrypting circuit 321. 

(3) The decrypting circuit 341 receives the en- 
crypted software 15 from the software storage 
medium 11, and decrypts it based on the soft- 30 
ware decrypting key 351 to generate the plain 

text program, then the plain text program is stor- 
ed in the main storage 63. 

As explained above, it is impossible to decrypt 
the encrypted software 1 5 in which the permission in- 35 
formation 13 is not stored so that it is impossible to 
execute such a program. Further, if the software stor- 
age medium 11 is illegally copied by a third party, 
since the medium number 12 is not provided or is dif- 
ferent, it is impossible to decrypt the correct software 40 
decrypting key 351 from the permission information 
1 3. As a result, it is impossible to decrypt the encrypt- 
ed program so that it is impossible to execute the pro- 
gram. As explained above, in the user computer, an 
algorithm and a secret key in the personal key gen- 45 
erating circuit 311, a software decoding key, and the 
plain text software are protected by a known safety 
means. 

Figure 11 A, 11 B, and 11C are explanatory views 
for electronic data, for example, character data (text), so 
symbols, image data, and sound data. Figure 11A 
shows an entire structure, Figure 11 B shows a flow- 
chart, and Figure 11 C is an explanatory view showing 
execution of the software. 

In Fig. 11 A, an optical magnetic disk 6 corre- 55 
sponds to the software storage medium 11 of Figs. 2 
and 3, and stores the medium number 12, the permis- 
sion information 13 and the encrypted data 17. The 



user buys the optical magnetic disk 6 and mounts this 
disk in an optical magnetic apparatus. As other exam- 
ples, an optical disk, a CD-ROM, a floppy disk, a hard 
disk, a magnetic tape, a cassette tape, and the like 
are known as storage media. 

A read/write (R/W) module 64 has a function of a 
key generating process (personal key generating 
process 31) and a decrypting process (decrypting 
process 32 and 34), and stores the corresponding de- 
crypted data from the optical magnetic disk 6 into a 
main storage 63 in an execution stage of the read in- 
struction. The main storage 63 is formed by a RAM 
to expand the unencrypted data which is taken from 
the optical magnetic disk 6. 

In Fig. 11B, in step S41, the R/W module 64 exe- 
cutes an application program. In step S42, the R/W 
module 64 reads the data from the optical magnetic 
disk. In step S43, the R/W module takes the data and 
encrypts it. In step S44, the unencrypted data is stor- 
ed in the main memory 63. In step 45, the data is dis- 
played and reproduced. 

In Fig. 11C, a relationship between the data stor- 
age medium and the user computer is explained in 
detail. 

(1 ) The user computer takes the medium number 
12 from the data storage medium 111, and sends 
it to the personal key generating circuit 311 to 
generate the encrypted medium key (see, step 
S23 of Fig. 9). 

(2) The decrypting circuit 321 receives the per- 
mission information 13 from the data storage me- 
dium 111, and encrypts it based on the medium 
key from the generating circuit 311. As a result, 
the data decrypting key 352 (corresponding to 
the software decrypting key 35) is obtained by 
the decrypting circuit 321 . 

(3) The decrypting circuit 341 receives the en- 
crypted data 15 from the data storage medium 
111 , and decrypts it based on the data decrypting 
key 351 to generate the unencrypted data, then 
the unencrypted data is stored in the main stor- 
age 63. 

Figure 12 is an explanatory view of a ROM/RAM 
mixed type optical magnetic disk. The ROM/RAM 
mixed type optical magnetic disk has un-rewritable 
area for storing the medium number 12, and has a 
readable/writable area for the permission information 
13, and a read only area/write only area for the en- 
crypted software 15. In the present invention, the me- 
dium number is given to the optical magnetic disk to 
write the medium number into the un-rewritable area. 

Figure 13 is an explanatory view of the permis- 
sion information stored in another storage medium. In 
this case, the software storage medium previously 
stores the medium number and the encrypted soft- 
ware. The permission information is stored into an- 
other storage medium. This means that the medium 
number and the encrypted software (or, encrypted 
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8. An electronic data protection system as claimed 
in claim 1 , wherein the vendor computer transfers 
the encrypted permission information to the user 
computer through a transmission line, and the 
user computer decrypts the encrypted electronic 5 
data from the storage medium based on the en- 
crypted permission information. 

9. An electronic data protection system as claimed 

in claim 1, wherein the vendor computer sends 10 
the encrypted permission information to the user 
in a document, and the user computer decrypts 
the encrypted electronic data from the storage 
medium based on the encrypted permission in- 
formation described in the document. 15 

10. An electronic data protection system as claimed 
in claim 1 , wherein the storage medium is an opt- 
ical magnetic disk, or a partially embossed optical 
disk. 20 

11. An electronic data protection system as claimed 
in claim 1, wherein the vendor computer further 
comprises a software encrypting key manage- 
ment table including software names and en- 25 
crypting keys each corresponding to each of the 
software names. 

12. An electronic data protection system as claimed 

in claim 1, wherein the user computer further 30 
comprises a software decrypting key manage- 
ment table including software names and de- 
crypting keys each corresponding to each of the 
software names. 
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